RE: [squid-users] Allow untrusted ssl connections

Okay, then please simply post the current squid.conf first -- chances
are, it sounds like its not configured correctly, between that, and your
browser configuration.

---------------------------------------------
Chad E. Naugle
Tech Support II, x. 7981
Travel Impressions, Ltd.
 

>>> "Charles Roper" <charlzroper_at_gmail.com> 12/28/2010 1:23 PM >>>
Any advice on how best to do that? This is my first linux box and I
created
it precisely to use it as a Squid Proxy. This steep learning curve is
kind
of intimidating :/

-----Original Message-----
From: Chad Naugle [mailto:Chad.Naugle_at_travimp.com]
Sent: Tuesday, December 28, 2010 10:05 AM
To: Charles Roper
Cc: squid-users_at_squid-cache.org
Subject: RE: [squid-users] Allow untrusted ssl connections

Okay ... Firstly, you should probably compile an updated version of
Squid,
using either the 2.7 or 3.1 branch from http://www.squid-cache.org, and
then
install it. That version of Squid is probably only current for your
install
of CentOS.

Then post your configuration, it should be under /etc/squid, called
squid.conf.

---------------------------------------------
Chad E. Naugle
Tech Support II, x. 7981
Travel Impressions, Ltd.

>>> "Charles Roper" <charlzroper_at_gmail.com> 12/28/2010 12:52 PM >>>
Of course, sorry.

squid-2.6.STABLE21-6.el5.i386
CentOS release 5.5 (Final)

When I try to install the latest stable version using "yum install
squid", I
get this:
------------------------------------------
# yum install squid
Loaded plugins: fastestmirror
Loading mirror speeds from cached hostfile
* addons: mirror.stanford.edu
* base: mirrors.usc.edu
* extras: mirror.its.uidaho.edu
* updates: mirror.its.uidaho.edu
Setting up Install Process
Package 7:squid-2.6.STABLE21-6.el5.i386 already installed and latest
version
Nothing to do
--------------------------------------------

Is there another way I should be updating?

Thanks for the reply!

-----Original Message-----
From: Chad Naugle [mailto:Chad.Naugle_at_travimp.com]
Sent: Tuesday, December 28, 2010 9:48 AM
To: Charles Roper; squid-users_at_squid-cache.org
Subject: Re: [squid-users] Allow untrusted ssl connections

Can you report back with your version of Squid, and configuration?

---------------------------------------------
Chad E. Naugle
Tech Support II, x. 7981
Travel Impressions, Ltd.

>>> Charles Roper <charlzroper_at_gmail.com> 12/28/2010 12:33 PM >>>
Hello,

I'm using Squid Proxy to access my home network while I'm away from
the
house ... I'm running into a bit of trouble with SSL connections.
Using just a plain 'ol connection to the internet, occasionally ,
Firefox
will warn me of "Untrusted Connection" on certain websites that I
visit. I
believe this is due to either invalid SSL certs or self-signed SSL
certs.
Either way, I do trust these sites ... some of them are my own! I tell
Firefox that it's ok and it will let me view the sites as normal.

The problem arises when I try to access those same sites through my
home
Squid Proxy instead of directly connecting to the internet. When I do
that,
Firefox throws a "Problem loading page error" :
------------------------------
Unable to connect
Firefox can't establish a connection to the server at 8.8.8.8:2096.
    * The site could be temporarily unavailable or too busy. Try
again in a few
          moments.

    * If you are unable to load any pages, check your computer's
network
          connection.

    * If your computer or network is protected by a firewall or
proxy, make sure
          that Firefox is permitted to access the Web.
-----------------------------

I'm assuming this is a security configuration, but I really need to be
able
to access those sites through Squid Proxy. For years, I've been using
OpenSSH with SpoonProxy (Windows-based) and it worked flawlessly, but
this
week I thought I'd make the switch to Squid Proxy to see if I noticed
any
improvements. I did notice many speed improvements, and this is the
only
problem that I've run into, so I'm hoping you can help me resolve it.

Thanks - look forward to your reply!

- Charles

Travel Impressions made the following annotations
-------------------------------------------------------------
"This message and any attachments are solely for the intended recipient
and
may contain confidential or privileged information. If you are not
the
intended recipient, any disclosure, copying, use, or distribution of
the
information included in this message and any attachments is
prohibited.
If
you have received this communication in error, please notify us by
reply
e-mail and immediately and permanently delete this message and any
attachments.
Thank you."

Travel Impressions made the following annotations
-------------------------------------------------------------
"This message and any attachments are solely for the intended recipient
and
may contain confidential or privileged information. If you are not
the
intended recipient, any disclosure, copying, use, or distribution of
the
information included in this message and any attachments is prohibited.
 If
you have received this communication in error, please notify us by
reply
e-mail and immediately and permanently delete this message and any
attachments.
Thank you."

Travel Impressions made the following annotations
-------------------------------------------------------------
"This message and any attachments are solely for the intended recipient
and may contain confidential or privileged information. If you are not
the intended recipient, any disclosure, copying, use, or distribution of
the information included in this message and any attachments is
prohibited. If you have received this communication in error, please
notify us by reply e-mail and immediately and permanently delete this
message and any attachments.
Thank you."
Received on Tue Dec 28 2010 - 18:47:08 MST